JP2005100063A - Authentication device and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem with a system that combines a plurality of kinds of biometrics wherein a device increases in size. <P>SOLUTION: An authentication input device 100 has an input part 10a which serves as the input face of an input device such as a pressure sensor or an optical sensor such as a CCD to accept the input of a fingerprint and a signature from a user. The input part 10a functions as a signature input tablet using a stylus when a signature is inputted. When inputting a fingerprint or signature, the user presses a fingerprint select button 12 or a signature select button 14 to specify the kind of authentication. Fingerprint data is taken into the input device when the user puts a finger on the input part 10a after pressing the fingerprint select button 12. Writing data is taken into the input device when the user writes his/her signature after pressing the signature select button 14. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an authentication technique, and more particularly, to an authentication apparatus and an authentication method for performing personal authentication using biometric information and other information to be authenticated.

  Authentication methods using personal property such as magnetic cards and IC cards, and authentication using secret information such as passwords and passwords have been adopted as methods for personal authentication. In recent years, as an alternative authentication method, biometrics authentication is intended for biometric information that shows physical features such as a person's fingerprint, palm print, face, iris, voice print, or behavioral features such as handwriting or gesture. It has been put into practical use.

In the case of biometric authentication, there is a case where only one type of biometric information is insufficient in accuracy, or some types of biometric information cannot be used by some people. For this reason, a composite authentication technique has been developed in which an authentication method using secret information such as a password is used in combination, or authentication using a plurality of types of biometric information is combined (for example, see Patent Document 1). In particular, the composite biometric authentication method using multiple types of biometric information can improve accuracy over the biometric authentication method based on a single type of biometric information, and biotechnology that has been difficult to put into practical use due to insufficient accuracy alone. Even metric authentication can be put to practical use by combining.
JP 2003-30154 A

  However, in such devices and systems that perform composite authentication, an input device is individually installed for each type of biometric information to be authenticated, which increases the overall size of the device due to the combination, and increases the manufacturing cost. There was a problem of increasing. In addition, since the user must input biometric information by using a plurality of input devices, there is a problem in convenience.

  The present invention has been made in view of such circumstances, and an object thereof is to provide an authentication technique that can simplify the device configuration of the composite authentication system and reduce the cost.

  One embodiment of the present invention relates to an authentication apparatus. This apparatus includes a single input device to which biometric information is input as authentication information, and a plurality of types of biometric information are sequentially input to the single input device. A plurality of types of biological information are not input simultaneously to the single input device but are input separately. Biological information includes information indicating personal physical characteristics such as fingerprints, palm prints, faces, irises, retinas, veins, and voice prints, and information indicating personal behavioral characteristics such as handwriting and gestures. According to this apparatus, an input device can be shared for inputting a plurality of types of biological information.

  Another aspect of the present invention also relates to an authentication device. This apparatus includes a single input device to which biometric information and non-biological information are input as authentication information, and the biometric information and the non-biological information are sequentially input to the single input device. Non-biological information includes secret information such as a password and a password. According to this apparatus, the biometric information input device can be used for inputs other than biometric information.

  Yet another embodiment of the present invention relates to an authentication method. In this method, a plurality of types of authentication information are sequentially input to a single input device, and information specifying the type of the authentication information is received from a user when the authentication information is input.

  Still another embodiment of the present invention also relates to an authentication method. In this method, a plurality of types of authentication information are sequentially input to a single input device, and the type of the authentication information is determined among the types assumed in advance.

  It should be noted that any combination of the above-described constituent elements and a conversion of the expression of the present invention between a method, an apparatus, a system, a recording medium, a computer program, etc. are also effective as an aspect of the present invention.

  ADVANTAGE OF THE INVENTION According to this invention, while improving the precision of biometrics authentication, size reduction and cost reduction of an authentication apparatus can be achieved.

Embodiment 1
An authentication system according to Embodiment 1 of the present invention will be described. The authentication system includes an authentication input device that receives input of authentication information from a user, and an authentication processing device that authenticates the user based on the authentication information input to the authentication input device.

  The authentication input device according to the first embodiment includes a single input device for inputting authentication target information, and an authentication type selection unit for selecting and specifying the type of authentication information. Several types of authentication input devices according to the first embodiment will be described.

  FIG. 1 is a diagram illustrating an appearance of a certain type of authentication input device 100a. The input unit 10a is an input surface of an input device composed of a pressure-sensitive sensor or an optical sensor such as a CCD (Charge-Coupled Device), and receives a fingerprint and signature input from a user. The input unit 10a functions as a signature input tablet using a stylus or the like when inputting a signature.

  The fingerprint selection button 12 and the signature selection button 14 are buttons for selecting and specifying an authentication type when a user inputs a fingerprint or signature. When the user presses the fingerprint selection button 12 and puts a finger on the input unit 10a, fingerprint data is taken into the input device. In addition, when the user presses the signature selection button 14 and signs the input unit 10a, handwriting data is taken into the input device.

  FIG. 2 is a diagram illustrating an appearance of another type of authentication input device 100b. The input unit 10b is an input surface of an input device such as a pressure sensor or an optical sensor, and receives a fingerprint and an imprint from the user. The input unit 10b functions as an imprint input plate when inputting an imprint. When the user presses the fingerprint selection button 12 and puts a finger on the input unit 10b, fingerprint data is taken into the input device. In addition, after the user presses the imprint selection button 16, the imprint data is taken into the input device by placing an imprint on the input unit 10b.

  FIG. 3 is a diagram showing the appearance of still another type of authentication input device 100c. The input unit 10c is an input surface of an input device such as a pressure sensor or an optical sensor, and receives a fingerprint and a palm print input from a user. The input unit 10c is made to the size of a human palm. When the user presses the fingerprint selection button 12 and puts a finger on the input unit 10c, fingerprint data is taken into the input device. Further, when the user presses the palm print selection button 18 and puts the palm on the input unit 10c, the palm print data is taken into the input device.

  FIG. 4 is a diagram showing an appearance of still another type of authentication input device 100d. The input unit 10d is an input surface of an input device such as a pressure sensor or an optical sensor, and receives an input of a fingerprint and a password from a user. The input unit 10d also functions as a touch panel for inputting a password. When the user presses the numeric keypad 20 displayed on the input unit 10d, the password is input. Also, when the user presses the numeric keypad 20, the user's fingerprint is taken into the input device.

  FIG. 5 is a diagram showing an appearance of still another type of authentication input device 100e. The image input unit 11 is an input surface of an input device such as an optical sensor, and receives a fingerprint and an iris input from a user. When the user presses the fingerprint selection button 12 and puts a finger on the image input unit 11 as shown in FIG. 6A, the fingerprint image is taken into the input device. Further, after the user presses the iris selection button 22, the iris image is taken into the input device by bringing the pupil closer to the image input unit 11 as shown in FIG. 6B.

  FIG. 7 is a diagram showing the appearance of still another type of authentication input device 100f. The image input unit 11 is an input surface of an input device such as an optical sensor, and receives a fingerprint and a face input from a user. When the user presses the fingerprint selection button 12 and puts a finger on the image input unit 11, the fingerprint image is taken into the input device. When the user presses the face selection button 24, the image input unit 11 captures an image of the user's face into the input device.

  FIG. 8 is a configuration diagram of the authentication system according to the present embodiment. The authentication system includes any one of the above-described types of authentication input devices 100a to 100f (hereinafter simply referred to as authentication input device 100) and an authentication processing device 200. The authentication input device 100 includes a sensor 50, an adjustment unit 52, an authentication type input unit 54, an authentication data generation unit 56, and a notification unit 58. The authentication processing device 200 includes a feature extraction unit 70, an authentication unit, and the like. 72 and a personal authentication database 74. These configurations can be realized in hardware by a CPU, memory, or other LSI of an arbitrary computer, and in software, it is realized by a program having an authentication processing function loaded in the memory. So, functional blocks that are realized by their cooperation are drawn. Therefore, those skilled in the art will understand that these functional blocks can be realized in various forms by hardware only, software only, or a combination thereof.

  Authentication input device 100 and authentication processing device 200 may be connected by a connection cable or the like, or may be connected by a network. Further, the authentication input device 100 and the authentication processing device 200 may be integrated as a single authentication device. The feature extraction unit 70 and the authentication unit 72 of the authentication processing device 200 may be provided on the authentication input device 100 side, and the authentication input device 100 may search the personal authentication database 74 via a connection cable or a network.

  The sensor 50 is a pressure-sensitive sensor, an optical sensor, or the like, and acquires authentication target information presented by the user. The authentication type input unit 54 receives the type of authentication information that is selected and specified by the user, for example, by pressing a button when the user inputs authentication information. The adjustment unit 52 adjusts the parameters of the sensor 50 based on the type of authentication target information acquired by the authentication type input unit 54. For example, the sensitivity of the pressure-sensitive sensor is adjusted according to the type of information to be authenticated, and the focal length of the lens of the CCD camera unit is adjusted. The authentication data generation unit 56 processes the signal acquired by the sensor 50 to generate authentication data, adds identification information indicating the authentication type acquired by the authentication type input unit 54 to the authentication data, and authenticates the authentication processing device 200. To provide.

  The authentication processing device 200 includes a feature extraction unit 70 and an authentication unit 72 as a configuration of the authentication processing unit. The feature extraction unit 70 extracts features necessary for authentication from the authentication data provided from the authentication input device 100. At this time, based on the identification information of the authentication type attached to the authentication data, image processing and analysis methods suitable for the authentication type are applied to extract features. The authentication unit 72 compares the extracted feature data with the feature data of the user registered in the personal authentication database 74, and authenticates the user. The personal authentication database 74 includes biometric feature data 76 and non-biometric feature data 78 of user authentication data. The biometric feature data 76 is data of physical or behavioral features such as a user's fingerprint, iris, and handwriting, and the non-biometric feature data 78 is secret knowledge data such as a password and a password. The authentication unit 72 searches the personal authentication database 74 for the biometric feature data 76 or the non-biometric feature data 78 according to the authentication type identification information attached to the authentication data, and collates the feature data.

  FIG. 9 is a flowchart for explaining an authentication procedure by the authentication system according to the first embodiment. Here, an authentication procedure of the authentication system configured by the authentication input device 100e of the type shown in FIG. 5 will be described.

  The authentication type input unit 54 of the authentication input device 100 accepts the user pressing down the authentication selection button (S10). First, the case where the fingerprint selection button 12 is pressed by the user (A in S10) will be described. The adjustment unit 52 adjusts the sensor 50 for fingerprint acquisition (S12). In the case of fingerprint input, since the user brings his / her finger into contact with the image input unit 11 of the authentication input device 100, the adjustment unit 52 adjusts the focal length of the lens of the CCD camera unit constituting the sensor 50 to the contact surface. A fingerprint image is acquired by the sensor 50 (S14). The authentication data generation unit 56 adds identification information indicating that the authentication type acquired from the authentication type input unit 54 is a fingerprint to the fingerprint image acquired by the sensor 50, and adds it to the feature extraction unit 70 of the authentication processing device 200. Supply. Since the authentication type is fingerprint, the feature extraction unit 70 performs image processing for the fingerprint on the fingerprint image supplied from the authentication data generation unit 56, and extracts the feature of the fingerprint (S16).

  The authentication unit 72 searches the biometric feature data 76 of the registered user stored in the personal authentication database 74, and collates the feature of the user's fingerprint extracted by the feature extraction unit 70 with the feature of the registered user's fingerprint. Then, it is checked whether there is a match (S18). As a result of the collation, when it is determined that the fingerprint is a registered user's fingerprint (Y in S18), the notification unit 58 issues a permission notice to the user by a buzzer or a lamp (S20), and any registered user's fingerprint is obtained. If they do not match (N in S18), the notification unit 58 issues a rejection notice to the user (S30).

  Next, a case where the iris selection button 22 is pressed by the user (B in S10) will be described. The adjusting unit 52 adjusts the sensor 50 for iris acquisition (S22). In the case of iris input, the user brings the pupil closer to the image input unit 11 of the authentication input device 100. However, since the distance from the pupil to the image input unit 11 is different each time, the adjustment unit 52 includes the CCD constituting the sensor 50. Adjust the focal length of the camera lens by autofocus. An iris image is acquired by the sensor 50 (S24). The authentication data generation unit 56 adds identification information indicating that the authentication type acquired from the authentication type input unit 54 is an iris to the iris image acquired by the sensor 50, and adds it to the feature extraction unit 70 of the authentication processing device 200. Supply. Since the authentication type is iris, the feature extraction unit 70 performs image processing for the iris on the iris image supplied from the authentication data generation unit 56, and extracts the feature of the iris (S26).

  The authentication unit 72 searches the biometric feature data 76 of the registered user stored in the personal authentication database 74, and collates with the feature of the user's iris extracted by the feature extraction unit 70. A check is made (S28). As a result of the collation, when it is determined that the iris is the registered user's iris (Y in S28), the notification unit 58 issues a permission notice to the user (S20), and the matching iris does not exist in the personal authentication database 74 (N in S28), the notification unit 58 issues a rejection notice to the user (S30).

  In the above authentication procedure, the user is authenticated based on the result of matching either the fingerprint or the iris, and even if some of the biometric information is not available to some users, Authentication is possible. This authentication procedure may be modified so that the success or failure of the user's authentication is finally determined based on the collation result of both the fingerprint and the iris. In this case, authentication accuracy can be increased by combining fingerprint authentication and iris authentication.

  According to the authentication input device 100 of the present embodiment, a plurality of types of authentication information can be sequentially input to a single input device. The plurality of types of authentication information may be a plurality of types of biometric information such as fingerprints, palm prints, and irises, or may be a combination of biometric information and non-biometric information such as a password. In general, in order to input a plurality of types of biological information and biological information and non-biological information, dedicated input devices that match the individual biological information and non-biological information are used. By sharing the device, the size of the entire apparatus can be reduced and the cost of the apparatus can be reduced.

  Further, in the authentication system of the present embodiment, the accuracy of authentication can be improved by combining a plurality of types of biometric authentication, or by combining biometric authentication and other authentication. In particular, some users may not be suitable for specific types of biometric authentication, but even in such cases, users can use multiple types of authentication methods, thus broadening the scope of operation of authentication systems. be able to.

  Further, in the authentication system of the present embodiment, when the authentication information is input to the single input device, since the input of the authentication information type is also received from the user, it is not necessary to determine the type of the authentication information. The authentication process can be switched according to the input authentication type.

Embodiment 2
FIG. 10 is a diagram illustrating an appearance of the authentication input device 110 according to the second embodiment. Unlike the first embodiment, the authentication input device 110 according to the present embodiment is not provided with a button for the user to specify the authentication type. A display 30 is provided for prompting. In each type of authentication input devices 100a to 100f of the first embodiment, various types of authentication input devices 110 can be configured by removing the configuration of the authentication type selection button and replacing it with the display 30. The authentication input device 110 of FIG. 10 is provided with a display 30 by removing the selection button of the authentication type of the authentication input device 100a of the type shown in FIG. 1, and hereinafter, this type is taken as an example in the second embodiment. However, the configuration and operation are the same for other types.

  The user inputs a fingerprint or signature into the input unit 10. The authentication input device 110 automatically determines whether the input authentication information is a fingerprint or a signature. When authentication information other than the fingerprint and signature is input, a warning message such as “Please input fingerprint or signature” is displayed on the display 30.

  FIG. 11 is a configuration diagram of an authentication system according to the second embodiment. The authentication system includes an authentication input device 110 and an authentication processing device 200. The authentication input device 110 includes a sensor 50, an authentication data generation unit 56, an authentication type determination unit 60, a display unit 62, and a notification unit 58. The configuration and operation of the authentication processing device 200 are the same as those of the authentication processing device 200 of the first embodiment shown in FIG.

  The authentication data generation unit 56 processes the signal acquired by the sensor 50 to generate authentication data, and gives it to the authentication type determination unit 60. The authentication type determination unit 60 analyzes the authentication data and determines the type of authentication information among the types of authentication information assumed in advance. If the authentication type determination unit 60 cannot determine the authentication type, the display unit 62 displays a message notifying the user so as to input authentication information of a predetermined authentication type.

  The authentication data generation unit 56 adds identification information indicating the authentication type determined by the authentication type determination unit 60 to the authentication data and provides the authentication data to the authentication processing apparatus 200. The notification unit 58 receives the authentication result from the authentication processing device 200 and notifies the user. The display unit 62 may display an authentication result by the authentication processing device 200.

  FIG. 12 is a flowchart for explaining an authentication procedure by the authentication system according to the second embodiment. Here, an authentication procedure of the authentication system configured by the authentication input device 110 of the type shown in FIG. 10 will be described. The sensor 50 of the authentication input device 110 acquires the authentication target image presented by the user (S40). The authentication type determination unit 60 determines whether the acquired authentication target image is a fingerprint or a signature (S42). When the authentication type determination unit 60 determines that the image to be authenticated is neither a fingerprint nor a signature (NG in S42), the display unit 62 displays an error so as to prompt the user to input the fingerprint or signature ( S44).

  When the authentication type determination unit 60 determines that the image to be authenticated is a fingerprint (A in S42), the feature extraction unit 70 applies an image for fingerprint to the authentication target image supplied from the authentication data generation unit 56. Processing is performed to extract the characteristics of the fingerprint (S46). The fingerprint collation procedure (S48) by the authentication unit 72 and the permission notification and rejection notification procedures (S50 and S60) by the notification unit 58 are the same as S18, S20 and S30 in FIG. The permission notification and the rejection notification may be displayed by the display unit 62.

  When the authentication type determination unit 60 determines that the image to be authenticated is a signature (B in S42), the feature extraction unit 70 applies an image for signature to the image to be authenticated supplied from the authentication data generation unit 56. Processing is performed to extract signature features (S56). Image processing for signature includes edge extraction processing and edge enhancement processing. The authentication unit 72 searches the biometric feature data 76 of the registered user stored in the personal authentication database 74, matches the user handwriting extracted by the feature extraction unit 70 with the handwriting of the registered user, and matches. It is checked whether there is a thing (S58). As a result of the collation, when it is determined that it matches the handwriting of the registered user (Y in S58), the notification unit 58 issues a permission notice to the user (S50), and does not match any handwriting of any registered user ( The notification unit 58 issues a rejection notice to the user (N in S58) (S60). The permission notification and the rejection notification may be displayed by the display unit 62.

  In the authentication system of the present embodiment, since the type of authentication information input to a single input device is automatically determined, there is no need for a user to select a button for selecting the type of authentication information. The device configuration is simplified and the user's trouble can be saved. When an unexpected type of authentication information is input, a warning message is displayed on the display unit, thereby prompting the user to input a predetermined type of authentication information.

  The present invention has been described based on the embodiments. The embodiments are exemplifications, and it will be understood by those skilled in the art that various modifications can be made to combinations of the respective constituent elements and processing processes, and such modifications are within the scope of the present invention. .

  As such a modification, in the above embodiment, the combination authentication of two types of biometric information or the combination authentication of biometric information and non-biometric information has been described. In addition, a plurality of types of non-biological information may be used. In addition to the information described above, other biological information that can identify an individual, such as a retina, vein, or voiceprint, may be used as the biological information. For example, in the case of a system that uses a voiceprint, it is possible to perform composite authentication of voiceprint authentication and password authentication by asking the user to say a password or the like. In addition, a gesture can be used as biological information that can identify an individual. Human movement, such as how to walk, can also be used to identify individuals. Not only physical characteristics but also such behavioral characteristics may be used as biological information.

  In the first embodiment, the authentication information is input to the input device after the user presses the authentication type selection button. However, the authentication type may be specified after the authentication information is input. Further, the order of authentication information to be input in advance is determined, and the configuration of the authentication type selection button may be omitted as a configuration for inputting authentication information in that order. In that case, a display unit may be provided to notify the user which type of authentication information should be input next.

1 is an external view of an authentication input device according to Embodiment 1. FIG. It is a figure which shows the external appearance of another type of authentication input device which concerns on Embodiment 1. FIG. It is a figure which shows the external appearance of the authentication input device of another type which concerns on Embodiment 1. FIG. It is a figure which shows the external appearance of the authentication input device of another type which concerns on Embodiment 1. FIG. It is a figure which shows the external appearance of the authentication input device of another type which concerns on Embodiment 1. FIG. It is a figure explaining a mode that authentication information is input with respect to the authentication input device of FIG. It is a figure which shows the external appearance of the authentication input device of another type which concerns on Embodiment 1. FIG. 1 is a configuration diagram of an authentication system according to Embodiment 1. FIG. It is a flowchart explaining the authentication procedure by the authentication system of FIG. FIG. 6 is a diagram illustrating an appearance of an authentication input device according to a second embodiment. 6 is a configuration diagram of an authentication system according to Embodiment 2. FIG. It is a flowchart explaining the authentication procedure by the authentication system of FIG.

Explanation of symbols

  10a, 10b, 10c, 10d input unit, 11 image input unit, 12 fingerprint selection button, 14 signature selection button, 16 imprint selection button, 18 palm print selection button, 20 numeric keypad, 22 iris selection button, 24 face selection button, 30 display , 50 sensor, 52 adjustment unit, 54 authentication type input unit, 56 authentication data generation unit, 58 notification unit, 60 authentication type determination unit, 62 display unit, 70 feature extraction unit, 72 authentication unit, 74 personal authentication database, 76 biological body Feature data, 78 Non-biological feature data, 100, 110 Authentication input device, 200 Authentication processing device.

Claims (8)

Including a single input device for inputting biometric information as authenticated information,
A plurality of types of biometric information are sequentially input to the single input device. Including a single input device for inputting biometric information and non-biometric information as authenticated information;
The biometric information and the non-biometric information are sequentially input to the single input device. An authentication type selection unit for selecting and specifying the type of the authentication target information;
The authentication according to claim 1 or 2, wherein when the authentication target information is input to the single input device, the type of the input authentication target information is designated by the authentication type selection unit. apparatus. A determination unit that determines the type of the authentication target information input to the single input device among the types assumed in advance;
3. The display device according to claim 1, further comprising: a display unit that warns when the determination unit determines that the input authentication target information is not of a type assumed in advance. The authentication device described.   The authentication apparatus according to claim 3, further comprising an authentication processing unit that performs authentication by switching to a feature extraction process suitable for the type of the authentication target information specified by the authentication type selection unit.   The authentication apparatus according to claim 4, further comprising an authentication processing unit that performs authentication by switching to a feature extraction process suitable for the type of the authentication target information determined by the determination unit.   Authentication in which a plurality of types of authentication information are sequentially input to a single input device, and information specifying the type of the authentication information is received from a user when the authentication information is input. Method. An authentication method, wherein a plurality of types of authentication information are sequentially input to a single input device, and the type of the authentication information is determined among the types assumed in advance.

Images